Description
An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendor subsequently patched this).
Unscored
CVE-2019-9763
EUVD-2019-19126GHSA-3jf3-xmwv-mv5p
An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mai…
Published Jun 19, 2019 · Updated Aug 4, 2024 · Assigned by mitre